The bug can allow attackers to read arbitrary files from the system, potentially exposing configurations and credentials.
The post Critical Vulnerability Patched in jsPDF appeared first on SecurityWeek.
Category Added in a WPeMatico Campaign
Critical Vulnerability Exposes n8n Instances to Takeover Attacks
Tracked as CVE-2026-21858 (CVSS score 10), the bug enables remote code execution without authentication.
The post Critical Vulnerability Exposes n8n Instances to Takeover Attacks appeared first on SecurityWeek.
Researchers Expose WHILL Wheelchair Safety Risks via Remote Hacking
CISA advisory warns that unauthenticated Bluetooth access in WHILL devices allows for unauthorized movement.
The post Researchers Expose WHILL Wheelchair Safety Risks via Remote Hacking appeared first on SecurityWeek.
Critical HPE OneView Vulnerability Exploited in Attacks
The maximum-severity code injection flaw can be exploited without authentication for remote code execution.
The post Critical HPE OneView Vulnerability Exploited in Attacks appeared first on SecurityWeek.
The Loudest Voices in Security Often Have the Least to Lose
Security advice fails when it comes from those who don’t bear the consequences and won’t be responsible for making it work.
The post The Loudest Voices in Security Often Have the Least to Lose appeared first on SecurityWeek.
Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity.
The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek.
Vulnerability in Totolink Range Extender Allows Device Takeover
An error in the firmware-upload handler leads to devices starting an unauthenticated root-level Telnet service.
The post Vulnerability in Totolink Range Extender Allows Device Takeover appeared first on SecurityWeek.
Several Code Execution Flaws Patched in Veeam Backup & Replication
Four vulnerabilities have been fixed in the latest release of Veeam Backup & Replication.
The post Several Code Execution Flaws Patched in Veeam Backup & Replication appeared first on SecurityWeek.
Cybersecurity Firms Secured $14 Billion in Funding in 2025
2025 was the strongest year for cybersecurity funding since the 2021 peak, according to Pinpoint Search Group.
The post Cybersecurity Firms Secured $14 Billion in Funding in 2025 appeared first on SecurityWeek.
Hackers Exploit Zero-Day in Discontinued D-Link Devices
The critical-severity vulnerability allows unauthenticated, remote attackers to execute arbitrary shell commands.
The post Hackers Exploit Zero-Day in Discontinued D-Link Devices appeared first on SecurityWeek.